1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
#!/bin/bash RULESET="table inet filter { set ssh_meter { type ipv4_addr size 65535 flags dynamic,timeout timeout 30d } chain test { add @ssh_meter { ip saddr timeout 30d } } }" set -e $NFT -f - <<< $RULESET